Lucene search
Ubuntu.comUB:CVE-2019-13720HistoryNov 25, 2019 - 12:00 a.m.
CVE-2019-13720
2019-11-2500:00:00
ubuntu.com
ubuntu.com
45
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.974
Percentile
99.9%
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a
remote attacker to potentially exploit heap corruption via a crafted HTML
page.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | chromium-browser | < 78.0.3904.97-0ubuntu0.18.04.1 | UNKNOWN |
| ubuntu | 19.04 | noarch | chromium-browser | < 78.0.3904.97-0ubuntu0.19.04.1 | UNKNOWN |
| ubuntu | 19.10 | noarch | chromium-browser | < 79.0.3945.79-0ubuntu0.19.10.2 | UNKNOWN |
| ubuntu | 16.04 | noarch | chromium-browser | < 78.0.3904.97-0ubuntu0.16.04.1 | UNKNOWN |
Related
securelist
securelist
Chrome 0-day exploit CVE-2019-13720 used in Operation WizardOpium
2019-11-01 16:00:12
Researchers call for a determined path to cybersecurity
2020-12-07 10:00:53
Windows 0-day exploit CVE-2019-1458 used in Operation WizardOpium
2019-12-10 20:00:39
gentoo
gentoo
Qt WebEngine: Arbitrary code execution
2020-04-01 00:00:00
nessus
nessus
GLSA-202004-04 : Qt WebEngine: Arbitrary code execution
2020-04-02 00:00:00
Google Chrome < 78.0.3904.87 Multiple Vulnerabilities
2019-11-01 00:00:00
Google Chrome < 78.0.3904.87 Multiple Vulnerabilities
2019-11-01 00:00:00
cvelist
cvelist
CVE-2019-13720
2019-11-25 14:22:55
checkpoint_advisories
checkpoint_advisories
Google Chrome WebAudio Use After Free (CVE-2019-13720)
2019-12-25 00:00:00
archlinux
archlinux
[ASA-201911-2] qt5-webengine: arbitrary code execution
2019-11-02 00:00:00
[ASA-201911-7] electron: arbitrary code execution
2019-11-04 00:00:00
[ASA-201911-1] chromium: arbitrary code execution
2019-11-01 00:00:00
zdt
zdt
Google Chrome 78.0.3904.70 - Remote Code Execution Exploit
2022-05-12 00:00:00
cisa
cisa
Google Releases Security Updates for Chrome
2019-10-31 00:00:00
prion
prion
Design/Logic Flaw
2019-11-25 15:15:00
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Google Chrome
2019-11-04 12:40:28
Exploit for Out-of-bounds Write in Google Chrome
2020-03-21 16:21:16
debiancve
debiancve
CVE-2019-13720
2019-11-25 15:15:33
talosblog
talosblog
Threat Source newsletter (Nov. 7, 2019)
2019-11-14 07:12:30
redhatcve
redhatcve
CVE-2019-13720
2019-11-04 18:56:15
nvd
nvd
CVE-2019-13720
2019-11-25 15:15:33
cisa_kev
cisa_kev
Google Chrome WebAudio Use-After-Free Vulnerability
2022-05-23 00:00:00
packetstorm
packetstorm
Google Chrome 78.0.3904.70 Remote Code Execution
2022-05-11 00:00:00
cve
cve
CVE-2019-13720
2019-11-25 15:15:33
exploitdb
exploitdb
Google Chrome 78.0.3904.70 - Remote Code Execution
2022-05-11 00:00:00
openvas
openvas
suse
suse
Security update for chromium (important)
2019-11-02 00:00:00
Security update for chromium (important)
2019-11-04 00:00:00
Security update for opera (important)
2019-12-10 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2019-10-31 00:00:00
attackerkb
attackerkb
CVE-2021-21166
2021-03-09 00:00:00
Chrome 0-day exploit CVE-2019-13720 used in Operation WizardOpium
2019-10-10 00:00:00
CVE-2019-1458
2019-12-10 00:00:00
threatpost
threatpost
SAS@Home Virtual Summit Showcases New Threat Intel, Industry Changes
2020-04-24 20:44:05
Google Discloses Chrome Flaw Exploited in the Wild
2019-11-01 15:35:03
Google Patches Actively-Exploited Zero-Day Bug in Chrome Browser
2020-10-21 12:23:29
kaspersky
kaspersky
KLA11601 Multiple vulnerabilities in Google Chrome
2019-10-31 00:00:00
KLA11716 Multiple vulnerabilities in Opera
2019-11-14 00:00:00
redhat
redhat
(RHSA-2019:3775) Important: chromium-browser security update
2019-11-07 06:56:43
fedora
fedora
[SECURITY] Fedora 31 Update: chromium-78.0.3904.87-1.fc31
2019-11-09 21:22:25
[SECURITY] Fedora 29 Update: chromium-78.0.3904.87-1.fc29
2019-11-15 03:20:57
[SECURITY] Fedora 30 Update: chromium-78.0.3904.87-1.fc30
2019-11-15 03:55:58
thn
thn
New Chrome 0-day Bug Under Active Attacks – Update Your Browser Now!
2019-11-01 09:32:00
krebs
krebs
Patch Tuesday, November 2019 Edition
2019-11-12 22:04:32
googleprojectzero
googleprojectzero
TFW you-get-really-excited-you-patch-diffed-a-0day-used-in-the-wild-but-then-find-out-it-is-the-wrong-vuln
2020-04-02 00:00:00
Root Cause Analyses for 0-day In-the-Wild Exploits
2020-07-29 00:00:00
Detection Deficit: A Year in Review of 0-days Used In-The-Wild in 2019
2020-07-29 00:00:00
malwarebytes
malwarebytes
Update now! Chrome fix patches in-the-wild zero-day
2021-03-04 13:24:38
mageia
mageia
Updated chromium-browser-stable packages fix security vulnerabilities
2019-11-08 02:36:48
debian
debian
[SECURITY] [DSA 4562-1] chromium security update
2019-11-10 19:16:43
osv
osv
chromium - security update
2019-11-10 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.974
Percentile
99.9%
Related for UB:CVE-2019-13720